A critical unrestricted file upload bug in Contact Form 7 allows an unauthenticated visitor to take over a site running the plugin.

Multiple high-severity vulnerabilities have been discovered in Ninja Forms, a popular forms builder plugin for WordPress with over 900,000 active installations. The plugin, developed by Saturday Drive ...

High-severity vulnerability affects Redirection for Contact Form 7 plugin installed on over 300,000 WordPress sites ...

Ninja Forms is not the first WordPress popular plugin to have been found to have a critical vulnerability this year. Back in February, researchers found a bug in UpDraft Plus affecting more than three ...